Static task
static1
Behavioral task
behavioral1
Sample
f51b867de1066b1092d5efa0456e0333_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
f51b867de1066b1092d5efa0456e0333_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f51b867de1066b1092d5efa0456e0333_JaffaCakes118
-
Size
7KB
-
MD5
f51b867de1066b1092d5efa0456e0333
-
SHA1
f7a07b61f019a2ab55fa68cf91ff673fce664028
-
SHA256
4441bf0b54a99ec6f6e59024d4dee2d30da5c04827948b90d0d61be4de11dc44
-
SHA512
4ea948fe87db69b67c807682f4cbddceb8d9e3ec7d0761d92db5b29c50822ba9a04738df3e8b848df03d38fb2070879d22885e4183f0594ead805eed31c83796
-
SSDEEP
96:K+P291t0umvRV1NgwgR4V/O8rubKcMkSum6d:K+OXpmvRvNgJp6oc6d
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f51b867de1066b1092d5efa0456e0333_JaffaCakes118
Files
-
f51b867de1066b1092d5efa0456e0333_JaffaCakes118.exe windows:4 windows x86 arch:x86
65cdcf7f38a0fd181c6cb07d32d8f71e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetDC
kernel32
CreateThread
ExitProcess
GetAtomNameW
GetLastError
Sleep
WaitForSingleObject
gdi32
EnumFontFamiliesExA
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 384B - Virtual size: 326B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ